source-reading Audit report.

Warnings

• Financial research output is not financial advice; require human review before any live investment decision
• No critical security risks identified. The skill only instructs the agent to read source code, run local scripts (e.g., build_book.py, style_scan.py) that are part of the repository, and use standard tools like git and ripgrep. No dangerous commands, secret access, or exfiltration vectors are present.
• The skill is written entirely in Chinese, which may limit accessibility for non-Chinese-speaking users, but this is not a functional defect.
• Financial research output is not financial advice; require human review before any live investment decision.
• Quality score needs review
• Stars/forks activity: 133 stars, 11 forks; issue activity unavailable in current metadata

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.